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METHOD FOR ESTABLISHING A COMMON KEY FOR A GROUP OF AT LEAST 
THREE SUBSCRIBERS 

(2) What is claimed is: 

1. A method for establishing a common key for a group of at least three subscribers, 
using a publicly known mathematical group G and a publicly known element of the group g e 
G of large order, 
wherein 

a) each subscriber (Ti) generates a message (Ni = g zl mod p) from the publicly 
known element (g) of the group (G) and a random number (zi) selected or generated by 
him/her and sends it to all other subscribers (Tj), 

b) each subscriber (Ti) generates a transmission key (k lj ) from the messages (Nj) 
received from the other subscribers (Tj, j * i) and his/her random number (zi) according to the 
function k iJ : = Nj zi = (g zj ) zi , the key being also known to subscriber (Tj) due to the equation k ,j 

= k ji , 

c) each subscriber (Ti) sends his/her random number (zi) to all other subscribers 
(Tj) in encrypted form by generating the message (Mij) according to Mij := E(k lj , zi), with 
E(k lj , zi) being a symmetrical encryption algorithm in which the data record (zi) is encrypted 
with the common transmission key (k lj ), and 

d) the common key (k) to be established is determined by each subscriber (Ti) 
from his/her own random number (zi) and the random numbers (zj), j * i, received from the 
other subscribers according to the equation 

k: = f(zl, zn), 

it being required for f to be a symmetrical function which is invariant under the permutation 
of its arguments. 
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